en
WPManageNinja is a WordPress software company and LLC that builds plugins for small and medium-sized businesses. Its core work is delivering community-driven tools for online forms, commerce, marketing automation, email delivery, customer support, communities, tables, and other business operations. It serves an international user base.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/15/2026, wpmanageninja recorded 18 security vulnerabilities in the last 90 days across 11 products, including 9 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder had the most security vulnerabilities in the wpmanageninja ecosystem, with 6 vulnerabilities—approximately 33.33% of the provider's total vulnerabilities during this period.
CVE-2026-103525FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' ParametersCVE-2026-103518FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array KeysCVE-2026-109695WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerabilityCVE-2026-108484WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-15178Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification51 Results | Page 1 of 6
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityCritical |
| SeverityCritical |